FBI PTA: |~ | 


UNCLASSIFIED/FOUO 


b3 

b7D 

b7E 


A new use of an IT system/project, including application of a new technology, that 
changes how information in identifiable form is managed. (For example, a change 
that would create a more open environment and/or avenue for exposure of data that 
previously did not exist.) 

A change that results in information in identifiable form being merged, centralized, 
or matched with other databases. 

A new method of authenticating the use of and access to information in identifiable 
form by members of the public. 

A systematic incorporation of databases of information in identifiable form 
purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in new uses or 
exchanges ofinformation in identifiable form. 

A change that results in a new use or disclosure of information in identifiable form. 

A change that results in new items of information in identifiable form being added 
into the system/project. 

Changes do not involve a change in the type of records maintained, the individuals 
on whom records are maintained, or the use or dissemination of information from 
the system/project. 

Other. [Provide brief explanation]: 


3. Does a PIA for this system/project already exist? _NO. X YES. If yes: 

a. Provide date/title of the PIA: January 9, 2006 

b. Has the system/project undergone any significant changes since the PIA? X NO. 

_YES. 

[The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for 
final FBI approval and determination if PIA and/or other actions are required .] 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. 07/06/07) 


NAME OF SYSTEM: Enter pr ise Directory Service (EDS) 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: j I 

Name: 1 I 

Program Office: IATI 

CZJ_!=” 

Division: SECD 

Phone :| | 

Phone| j 

Room Number: JEH-7338 

Room Number: 


Date PTA submitted for approval: 



FBI DIVISION APPROVALS A PIA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with Insecurity, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.) If the subject of a PTA/PIA is under the program 
cognizance of an FBI HQ_ Division, prior to forwarding to OGCthe PTA/PIA must also be referred to the FBIHQ_Division for program review and 
approval, if required by the FBIHQDivision. 



Program Division: 

FBIHQDivision: SECD 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 

executive as Division 

Name: 

Name] j 

determines) 

Title: 

Title: SECD/iAS/IATU Unit Chief 

Division Privacy Officer 

Signature: 

Signature:/s/ 


Date signed: 

Date signed: 9/26/07 


Name: 

Name: Jeffrey j. Berkin 


Title: 

Title: SECD, Deputy Assistant Director 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature:/s/ 



Date Signed: 9/29/07 



Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-Hq-C1321794 

Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGC\PCLU intranet website 

2 - FBI OCIO / OIPP 1 - PCLU Library 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC/Privacy Officer 

2*- FBIHQDivision POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Enterprise Directory Service (EDS) 

For efficien cy, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

Enterprise Directory Service (EDS) is a directory service that contains identity and access control attributes of FBI employees, contractors, 
detailees and integrees. 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 

employee/contractor information: 

identity and access control attributes are the attributes needed to allow FBI mission critical applications to successful authenticate and 
authorize users. Examples include user’s name,X..509 certificate, citizenship, division, security clearance, cost code, squad, RA (Resident 
Agency) code, program code, functional title, role, group/CO! (community of interest), etc. Attributes will be collected from authoritative 
data sources for users registered in the FBI PKI systern. 

2. Purpose for collecting the information and how it will be used: 

The EDS objective is to support authentication, access contraband also workflow needs of the bureau. It collects specific attributes from 
the various legacy authoritative data sources and provides a unified view of those attributes to the clients (application systems or users). 


3. The system’s structure (including components/subsystems): 

EDS consists of| j 

I -1 

4. Means of accessing the system and transmitting information to and from the system: 

EE'S vl can only be accessed by [ | It gets data attributes from the various data sour ces l I 

[ depending on the source. It provides data attributes to elients |~ | 

5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 


b7E 


b7E 


EDS clients include: application systems, FBiNet users, and administrative clients (directory administrator and application specific 
delegated administrators). EDS directory solution will enforce proper access control via privilege groups and Access Control Policy Point 
(AGP) which are used by Oracle directory In addition, it also uses Access Control l ist (ACI.) and Access Control Information (ACI) at the 
directory object, entry, or attribute level. 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

Only FBI personnel with access to FBInet will have access to EDS v i. 


7. Has this system been certified and accredited by the FBI Security Divisions? _Yes X No 

EDS is currently going through its C&A process for both the prototype and production systems. We anticipate a full ATO for the 
production system on the FBInet. 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Enterprise Directory Service (EDS) 

8 Is this system encompassed within an OMB-300? XYes _No _Don't Know 

SECD/iATl Program - OMB 011 -10-02-00-02-3231 -00-404-140 

I. Was the system developed prior to April 17, 2003? 

_YES (If "yes," proceed to Question 1.) 

X NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "ye s," please explain the nature of those changes: 

(Continue to Question 2.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ’s Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes,” afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 

II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 

(Continue to Question 2.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Enterprise Directory Service (EDS) 


2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

X_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

X YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

X No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 
for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no,"go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," afull PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 


(If "no," a full PIA is required. 


PTA is complete.) 
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fbi nm a* \ imrfshoui wm wmi i u 'Vi u . r^ — t ," 

\AMF OF S \ Ml h\|: I bumrm »"rime Rep''<un 0 Ibegatm 


A, Ckmerai System Description: please briefly describe: 

The Uniform Crime Reporting (UCR) Program R a collective effort on the past of mote than 
17,000 federal, state, local, aod tribal law enforcement agencies to present a nationwide statistical 
view of the volume and scope of crime and to enable analysis of crime trends. The UCR Program is 
managed by the FBI's Criminal Justice hifbrniation. Services Division (€.R$), Crime Statistics 
Maria g cm e n 111 n it t C S M U). 

» , r i " 'gv.*v.aU? ro-m>, ted to \e.o' Cx ! >P one'" » V - "crt dk>' 

about law enforcement officers killed and assaulted, hate crime, and police employee personnel. 
Most of this information is purely statistical and dues not contain personally identifying mlorrnadon 
* Pin U,w nfud'k '. * ittdit hluaK Itu'cm m. once an h,h,toper, ,d a i,m eons cement i Twer xdlcd 
M , ^ „ „x -v vn n\ , iawVHv a r o'<« u> n v txvod a m do u oc tt 
„>.<,' ^ a x ^ x^* v a ^ x v 0 m -x. x.„ ' o so 

v mrwmme Co 'V^'m ,b\ Uemnheye tUtn, nhuch m m enMuvd fn 0\' * 'CR Proemm oUwv m * 

v vr< «. xx "lit *k v" x. 5 „ x d I N x s * v. m x ix t et 0*Mx \ \ 

and Assaulted t LUOKA) system, 

1, Type of infnmsaiinn in the system; 

The UCR Program contains non-PR statistical data on specific criminal offenses such as 
murder, manslaughter, rape, robbery, aggravated assault, burglary; larceny-theft; motor vehicle theft, 

'V. V \ I »V X. X XVX * ,x\ X> Wx a Nl X S ~Xx v V 

arrested and police employees. 

a. If rite system is solely mimed to haems! govemme m operations please provide a brief esshmahon 
et mo ,p s any and t>p' 'Reg vu» wannao * eU- m.anmu 

MM, 

2, Purpose for collecting the i reformat bus nod how It will he used: 

s he ''umsocxd mfmtCxU^' t xtx'pu wd dm' ch da l t h btvgnar ?. t ,vu ip da. FBI t- 'uoxhuv 
stabstka; reports that are disseminated to the public. These reports am: 

Prei i m movy Mem iamumi Report 
PreJmemory Ammai Report 
Crime in the Under/ States 
Hate Crime Statistics 
It OKA 

Preliminary LEOKA 

ihest' pxh\KxVUi«w pio'xixix' Ian enioivemnv, v, tth .n.btsuval Amt n moe nt xgvnmouai and 
tactical studies arid as an aid to allocate police resources. In addition, officer safety training rosy be 
reviewed, in light of inmrmation contained In UCR data. This statistical information may also be 
accessed through the fbi.gov 'xvebe.be. 
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n*nnm % irrimkh n w u \simiu u s 5 - - 

\ kMF OF b\ b I FM: Umform 0 inv Repotsmg IV m am 

The FBI Use utilizes UCR statistics to prepare special studies and respond to questions Rom 
hie public,, government officials, and researchers. Data utilized for this purpose is retrieval via 
ad-hoc requests tor inform an on iron? the mantinurc system and does not contain Pm 

3. The syrienrs structure (including eompo»euSs/salisystems}: 

The current UCR Program ;s an app heat ion that shams resources hosted on a?g 
iformrastrativo mainframe computer operated by the FSi s mtorrmfoon ieconoiogy Dpemnom 
Division located at FBI Headquarters in Washington, D.C. The current UCR Program collects 
enrue information and atoms it in kauriR architecture on a mainframe system within three separate 
, -* ,, \ "> 1 Uu'o tR- o * n ' ^ dH oi l ti < 

tmdmvny through the OCR 'Redevelopment Project to replace the current UCR Program 
with a more efficient application that will facilitate statistical research of the FT. R database* 
However, the information collected and disseminated by the UCR Program will re mam the 
same. 

4. Means of accessing the system aad transmitting information, m and from the system: 

Direct access to the UCR Program is Hunted to approximately ! h &e CJIS 

,0 s Cm v ^ v 11* 0 <. t»i, ** 

submission capabilities of various federal state, local, and tribal contributors, foe FBI receives 
statistical data in a variety of formats, including paper submissions, cartridges, and internet e-man 
submissions ma Law Enforcement Online (LEO). CHS personnel copy the data mto electronic mes, 
check It for errors, and foci dime corrections as needed.. 

No information is transmitted directly from the UCR Program; however, data Rom me 
' ty,)i ^v„.s ' ■> In v w 1 < defoe >. «. n v W\k- * n < ‘ 

preparation of reports, perform special statistical studies, and respond to questions from government 
officials and the public. 

As noted sapm t under rite proposal for the redevelopment of rite UCR System, a 
repository of non-personalty idenrifkthie. data will be made available io law en.toreen.tent and 
the general public for direct query through the Internet, 

5. Who whom FBI will have access to the ftriomtatfoa In the system and controls for ensuring 
that, only :m 10orbed persons can access the information? 

Access to the data contained within the UCR application is presently limited to personnel 
assigned to the CJIS Division's CSMU, Como Analysis Research and Development Lent, and 
Training and Systems Education Urm. as well as designated staff within the Criminal fovesbgafsve 
l>o.Moa,mr IvncqU-m ,-u. .JnL. mquuc acccw to d cam m unto- to perihn Mono, v a 
analyzing data, and preparing reports. A limited number of personnel assigned to trie CJIS 
U I ' l i m ' a if > MM < k u s ^ i 

Operations Division also have access to the system to process data or perform system security 
functions. 
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HDt'RiVuA iRRlMiOLRA\Vt\MS*i’T\) A' A K K•' - '' 

MVIIO^ o ?(<r< 'tpo U if 

The UCR applktbioo is accessed from an administrative mainframe computer; access 
m the adtuiat'irafi'e mainb ame teqones a * ahd uwr name and strong password (wfekh 
must fee changed on a regular basis). An access log Is maintained far the administrative 
mainframe and Is subject ta audit 

C Wte anfedde the Fit will have access to the information in tfee system and controls far 
ensuring that «n!y authorised persons can access the information? 

Cnrreniiy. a© one outside the FBI has direct access to the informahon within the UCR 
application. 

Under the proposal for the redevelopment of the IJCR system, a secondary, secured 
repository of non-personalty identifiable data will be made available to law enforcement end 
the general public for direct query through the internet. As the system is feeing designed, 
ITMS and the Information System Security Officer will ensure through current security 
standards that only authorised persons will be able to access tbe master data base, 

7, lias this system been certified and accredited fey the FBI Security Division?_Yes X N o 

The UCR Program Is a low risk application residing on the i-BPs administrative 
mainframe computer and therefore does not require separate certification and 
accreditation, 

S, Is this system encompassed within an OMBAMMi?_Yes X No _Don't Knew 

The existing UCR system is not encompassed within an 0MR~3OO, An OMRXRXI for 
the OCR redevelopment prelect is under development, but has not vet feeen submitted to 
OMR. 

Was the system developed prior to April 17, 2003? 

„X.YES (if Wssy ptosesd to Qvosbso i.} 

NO (If "Oo,psocccd to Section II.) 

1, Has the system oadergone any significant changes since April 17,2003? 

.YES if^yesf" pica.se espbao the nature of those changes; (Continue to Question. 2.) 

.>L„. NO (it WrQ v tbe FT A. is complete and should he scot to FBI OGCb Privacy and Civil Liberties 

i n i AY > 1 Nbf p-'Os^j ,,n,t Sowodow 'o .>>K Pm. s \ ,ukN, w i ihe'"Rf OHke. 1 ok".? 

,,'n , tivs's-e a- i'i '' ^fc^i'nx-d > 

'The UCR Program has not undergone any significant changes since April 17,2CM>3; 
however, the C.'JIS Division Is seeking authomatio-n for a redevelopment project to include 
an initiative that will Improve the public availability' of statistical data in tbe UCR system 
via the internet. 
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FBI PRIVACY THRESHOLD ANALYSIS (FI'A) (OGCfoCLU (Rev. 07rW07) 

NAME OF SYSTEM: Unifonn Crime Reporting Program 

2. Do the efesages involve she collection, umlatea&ace, or <llsseial«atUm si iaiorsaatioa m identifiable 
form about ind fold ends'? 

) f \ Dm- pie. „>xo ' •> Q, OA' 


(tf "no” the PTA is complete ami should be scot to FBI OGCT Privacy am! Civil Liberties 
Y.U} for review. approval,, and forwarding to DOFs Privacy and Cm! Liberties Oitsce. 


X NO 
Unit. (PCI, ., 

Unless you are otherwise advised, no PIA is required.) 


3, h the system solely related to iatemal government operations? 

YES If “yes," is this a Major Information System (as listed on OUCs PBf.NEt website)?: 

Yes. (If "yes," a foil PIA is required., PTA is complete..) 

No. (Ifo'mv the PTA is complete and should be sent to FBI OGC’s Pr ivacy and 

.Civil Liberties Can(PC Lib for review, approval, and forwarding to DOJ's Privacy 

and Civil Liberties Office. Unless yon arc otherwise advised, no PIA is required, 

(FBI and DO? reviewing officials reserve the right to require a PIA.) ! 

NO (if " rso," go to section Ft to determine If a full or short-form PIA is required.) 

11. For- systems developed, after April I ?, 261)3. 

1, What is tire purpose of the system? (Answer In detail unless details already provided m A. 2 

above):; 

(Continue to Question 2.) 

2, Does the system collect, maintain or disseminate information is Identifiable forts about 

individuals? 

.YES ( If "yes," please proceed to Question 3.} 

_NO (If “no?"' the PTA is complete and should be sent to FBI OGCs Privacy and Civ;I Liberties 

Unit (PCLU) for review, approval, and forwarding to DOFs Privacy and Civil Liberties Office. 
Unless you are otherwise advised, no PIA is; required.) 

3, Is the system solely related In iatem.nl government operations? 

h \ \ t'! \\ V V on K h " te f 1 ! 1 K I V"- ' V 

_Yes. (IfQves,” a full PIA is required.. PTA Is complete.) 

.No. (If "no? 1 the PTA is cootfoete and should be sent to FBI OOC's Privacy 

and Civ;! Liberties Unit (PCLti) for review, approval sod forwarding to DOJN 
Privacy and Civil Liberties Office. Unless yeas are otherwise advised, no PtA is 
toqmtu. 5 A Bi,o At U ret iOvii-, .vfooaN scvxss foe -■Qtf to o'qooe a Pi v w 

N i t , <. v 5 „ n t b ml e v 
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FBI PRIVACY THRFSiKM B \Y\LYSIS tPTO a\C O. . < A.> - .*“> 

NAME OF SYSTEM: [insert namej 

IIL Fail. or Short-Form Pi A 

.L Is the system a major mformatkm systems fas listed o.a OGCN FBI.NET website)? 

YES (If "yes;' a full pi A is required, PTA is complete.) 

NO (If Aio," please continue to question 2.) 

1. Does the system Involve remise Information AND have limited useOeeess? 

_YES A short-form P1A is tempered, (i.e.. you need only answer Questions I. L 1.2,2. L 3.1,4.;, 

5.1. (if appropriate), 02, 62, and 8.9 of the Pl'A template.) Please rests that FBI and t'X'Xi 
*e\ v"s nisi oEAnsL' ,e', ,e syeht a w>-ecw voue-A'tvo os r Of I t >0 1'A £s 
co m pfete—Sorwa ?d w 1th PI.A,} 

.NO TFAkO a foil Pl'A Is required. PTA is complete.) 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (Rev. 10/31/06) 


NAME OF SYSTEM: Voice Recognition Software 


FBI SYSTEM CONTACT PERSON 

Name| | 

Program Office: none 

Divisi on: note: project for Associate Deputy Director Joseph Ford 
Phone | | 

Room Number: 6026 

Date PTA submitted for approval: 01 / 12/07 

FBI DIVISION APPROVALS: 


b6 

b7C 


Program Manager 

(or other appropriate executive as Division 
determines) 

Signature: TWS [digital] 

Date signed: 01/12/07 [digital] 

NameJ j 

Title: Special Advisor to the Chief Financial Officer 

Division Privacy Officer 

Signature: 


Date signed: 


Name: 


Title: 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/Privacy and Civil Liberties Unit 
(PCLU) (JEH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 


Date Signed: 5/10/07 


Name: David C. Larson for Patrick W. Kelley 


Title: Deputy General Counsel 


Upon final FBI approval, distribute as follows: 

Original signed copy to 66F-HQ;C1321794 

Copies: 

1 - DOJ Privacy and Civil Liberties Office (Main Justice, Room 4259) 
1 -FBIOCIO 

1 - FBI SecD 

2 - Division POC/Privacy Officer 

(please reproduce as needed for Program/Division file(s)) 
1 - OGC\PCLU Intranet website 
1 - PCLU Library 
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1 -PCLU Tickler 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: Voice Recognition Software 

For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact 
Assessment (PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as 
follows: 

I. Was the system developed prior to April 17,2003? 

_YES (If "yes," proceed to Question 1.) 

X NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Administrative Law Unit 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise 
advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about 
individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Administrative Law Unit 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise 
advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes,” please provide a brief explanation of a) the purpose of the system, and b) quantity and type of 

employee/contractor information: 


Is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Administrative Law 

Unit for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: Voice Recognition Software 


Unlessyou are otherwise advised, no PIA is required. (FBI and DOJ reviewing officials 
reserve the right to require a PIA.)) 

NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


II. For systems developed afterApril 17, 2003. 

1. What is the purpose of the system? (Answer in detail and proceed to Question 2.) 

Voice Recognition Software (VRS) has three primary areas of functionality. Dictation, whereby spoken language is 
transcribed to written text; commands that control, whereby spoken language is recognized as command to perform an action; 
and finally text-to-speech whereby written text is converted to synthesized audio stream. 

The FBI project team assumes that the main usage at the Bureau will be the transcription of spoken language to written text. 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

X YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Administrative Law 

Unit for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required.) 

3. Is the system solely related to internal government operations? 

X YES If yes," please provide a brief explanation of a) the purpose of the system, and b) quantity and type of 
employee/contractor information: 

a) the purpose of the system is to facilitate the transcription of documents that need to be created with or 

without voice recognition software (VRS). For example, without VRS agents need to complete 302's by typing from their rough case 

notes; with VRS agents could complete 302's by dictating their case notes into the software and then modifying the document as needed 
to ensure accurate capture of the information. In either case, the final product should be the same. 

b) Information captured by VRS will include the same case and other administrative information already 
captured by 302’s and other standard FBI documents. 

The quantity and type of employee/contractor information should be the same with or without VRS. 


Is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

X No. (If "no," the PTA is complete and should be sent to FBI OGC's Administrative Law 
Unit for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: Voice Recognition Software 


are otherwise advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right i 
require a PIA.)) 

NO (If "no," go to section III to determine if a full or short-form PIA is required.) 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

CffioYAm to the DOJ Initial Privacy Assessment HPA)| 


NAME OP SYSTEM (PROJECT: Public Key fnlmstrnetnfeiPCB 
RIKR FBI Unique Asset ID:_S\ n (kt'A ' _ 



MMIM PUOJK'rPOC 

1 ill l 

*<CO U *»<>*_ 

CfossPkd Bs: 

NAroe:| | 

Nome: 




Proaraav Office: ESCDbSC 

Phone 



Declassify Oh: 

Uivoioo. HAD 

Boom 

Number: 7330 


Phone:| I 




Room Nnmhor: 138$ 




FBims iMiinsi m w\ 



tbs/sunn Manager (or other appropriate 
cxecauve as Division detenu mest 

Division P: 

ovacy Oower 


Loo oOhos..; i 

Eh S/D NS U 

foanaunsnl I 

s m mim 


Dam snmoclt /fo(:fo/Aa : a > 

N;:rne:l i 

Tilk: Unit Chief . > . 

NhAe::|___ | 

Title: Privacy Office: 


FBI HQ Division: 

ITSD 

- ‘ s 

Date cameo: .;/■-//R.kn/o /) 

Nome: Rail Seal onacib //Ah/Af 

Tide: Section Chief 

Signature: 1 
Dale vaynvd :l 
Name: 

Title: 

1 


After ail dh hhm approvals, forward signed herd copy plus electronic copy so FBI OGC/PCLIJ tJEII 7339). 

Sl hc RE Privacy ;vnl Ch i; Liberties OPkeffi dehrmioannna, ooabh i-w:. maker fond apmova.i old he recorded oo kv 


Ep»«. food FBI approval, ITU 0OC.7PCLE wHi distribute as follows; 

i ■■ Signed original to ilk ffiLMIQ-ClSoffifol Dwd io JEH IB204 \ 


- DOJ Office of Privacy and Civil Ciborne 

needed for Pro mamv Division ll le(s) h 
;s (via e-mail to I 

- OGCtPCLIJ intranet 

ivscyiyfossujoj.gov; 

1 

- PC Id; UC 

Cfctassffiod, vsa hand delivery to ill 

1 PennAve. NW, Suite 940, ; 

- PCLU Library 

530i 

I 

- PCLU Tickler 

oBiORot , ir < n- : m ym am | 

FBI SecDf,U/ teke. cony: via oooa.il to 

uc:| 1 | 

b6 

RMD/RMAf: • att;v| | 

Pay am Division POC /Privacy Officer 
FBI HQ Division POC /Privacy Officer 


b7C 
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b vi ini ahf k< »\ u m r nnn\ \ \u a\ c onritiovm , r h«$ Motion win he emn^vtui by th* FBI 

PC DC "PCI H> follow mil , FTA sub mission, Tin- FT A draffor xfo mkt skip s o the rwvf page add eoarmned . 


PlA b required by the E-Government Act 
pi A is so be completed as a matter of FBI/DOi discretions, 
is PlA to bo oubiishod on FBLOOV fatter any RMD POiA redactions)? .Ve 


X 


PlA is not required tort.be following reason(s): 

System does not collect. maintain. or dissemiaaie Fit, 

System is grandfathered tin exigence before 4/17/2001; no later changes posing s 
X Information in foe system refates to internal government operations. 

S\Sv V f o ill) i , u II J <?V, K x * I V 

X No swnif'ieaM privacy fasces fat privacy issues are unchanged). 

Other (describes: 


Applicable SORNts): . 


Notify FBI RMD/RiDS per MIOG I N0.-2.3? xNo Yes "See sample BC on PC'Lit intranet website bore: 
http:f/ho!nofP?()rO(}C/LTS1 > CI.,U/Frfaaey(ovi;X20£,ibe:tiexX>i0Llbnin Bonn Pir sniogi 91-2-3 ee.wjxt 

NOF\ M'\ N x, n ' u \ . iv 1 \ _ Yes Chtdieafa revisions' needed); 


Preps.ro/revfa.efadd Privacy Act (csfa • xnxtemefas for rohued forms? No Yes t indicate forms affacted): 


RECORDS.. The program should consult with RMD to ideMsiy/tesofae any Federal recofos/efecironie records issues. 
The system may contain Ifademi records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration Is necessary ; . HMD can provide advice on thi: 
as well as on compliance with re gfa r emeurs for Fleet rente Recocdh cepfag Certification and any necessary' upd ates. 


Other 


f t ofa w. fa fowl Ns . (V n x vx'ncml 

Counsel and FBI Privacy and Civil Liberties 
Officer 


Sign a tore: 

Date Signed: 8/23/20SO 


■■"'A? 
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|i!N?jli;i<r€LA^iKiCATIC>N/CON : l'l<OL MARKINCS, 

IF AfBMOFRIATFj 

I. INFORMATION A SOFT THE SYSTEM / PROJECT 

1. The FBI PKI is an integrated suite of products, which meet and exceed the FBI's base 

requirements, to provide enhanced cerlhkate management features Or improved security 
services. Key elements of the designed solution are. integrated suites of COTS products 
that provide enhanced usability and key management; client so Aware that fully meets the 
F BI's requirements tor transaction validation; and scalable architecture that wifi grow to 
support the FBI's anticipated enterprise user community. IniciaUy, the system tacf states 
sc <, e f , " mm*' <, t ^ > u i s w or v's.'r'' ' N 

locations.. li ne system is sealed to support lull bepky men- of PKI services of strong 
authentication, digital signatures, encryphookecrypbon services, and noo-repodiaiion 
tfavmghout FBI. 

2. Does the syxtent/prqiect collect. ma.imaio. or disseminate any information about 

n;\u r.ru Kv , ' ,mmd w m 

NO fit' no, S TOP, The PTA is now complete and sifter division »pf?rov&|.{$) 
should be submitted to FBI OGC/PCI..U lor final FBI -approval. Unless you are 
otherwise advised, so PTA is required.| 

x s , n Ittt'v pleas*, umtsooe s 

a. 4 o t ■< Jv <■<,'«.*'{ Am-. aeph , ac »'*> ecu. ' dw 

system about Individuals: Bear in mlrid that log-on information may identify or be 
linkable to an individual. 

XV N v 

X The information directly identities specific individuals, 

.X The information is intended to be used, in cord unction with other data, elements, 

to Indirectly identify specific individuals. 

.X.The Information can be used to distinguish or trace an individnsTs identity fie,, it 

Is Iiiikcd or linkable to specific ttsdhiduaisr 

I f yon marked any of the above, proceed to Question J. 

None of the abo ve. If none of the above, describe why the information docs not 

,o, ' u, s e , ' s v , 0, 'a, x»x«v*.v jGfO'vbrtxrd O'w nan, 

S TOP here after providing the requested description^ 

4. Does the system/prqlect pertain only to government employees, contractors, or 
cotisult.atds? 

.NO X YES 


f INN OFT cuayyl F!C ATI ON7CONTKOL MARK I NON. 
IF APPROPRIATE) 
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\m v* s K t OM M 

IF APPROPRIATE! 


5. Is information, about tinned Staves citizens or lawfully admitted permanent reskkrd 

«. ' xx o xx ? 5 ' v < x ' x\* a \ >a x. k x x V o 

.NO. P'f no, skip to question 7,| 

.X YES. |If yes, proceed to the next question, f 

6. D>< x a.' x\ acre \x s K\a c due! .tr. v sum 'no's dx.v'N imm tbo pm 'x x o '..I > e : to 
sihyeet of the imXmaabon? 

NO |'|f no, proceed to question 7,| 

X YES Bid only as an A dimnis tuition inaction for proper veiling 


a.. Docs the system/project support criminal. CIS or FQ investigations or 
asaessnnmtsN 

.X... NO 

YES (If yes, proceed re question 7,} 

separate noticeY? 

.NO IThe program will need to work with PCLU to develop/implement 

the necessary formN),| 

.X.YES Identify any forms, paper nr deeirooky used to request such 

information from the information suhjeett The FBI Rules of 
Behavior form provides a Privacy Act notice for PKI registrants* 

7. Arc Social Secadty Numbers (SSNsn eollocicd, maintained or disseminated from the 
X NO YES If yes, cheek all that apply; 


.SSNs axe necessary to esuddish/coufimt the identity of sabOcts. victims. 

witnesses or sources in tins law enforcement or intelligence activity. 


I IN'VERT CLASS! FN'VnON/CWmOL MA RIvINOS, 
IF APPROPRIATE! 
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(INSERT CLASS!FiCATION/CONTIlOL MARKINGS, 

IF APPROPRIATE] 

SSNs are necessary to identity FBI personnel in this internal admhustraiive 
system. 

SSNs are important lot other reasons. Describe: 

The aystetrFptqkcl provides special protection to SSNs (e.g., SSNs are 
encrypted, hidden from ail users via a look-up table, or only available ;o certain 
users). Describe; 

It is not feasible for lire system/prujeci to provide special protection to 
SSNs. Explain; 

8. is the system operated by a contractor? 

X Yes. Information systems operated by contractors her the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must, be included in the event foe system 
Norn w tm no s' ‘ XlfffAm, 1 re q! uncUs t e U 
imposed as a matter of Department of Justice policy. Consultations whit the 
Office of the General Counsel may be required if a contractor is operating the 
NS.Ntcm he the MB 

9. Has the system undergone Certification & Accreditation (CTA) by the FBI 
Worm Dh FT ?■ iSeelA 1 

.NO If no, indicate reason; If €& A Is pending, provide anikipafed 

completion date; 

Nik O' yes, please indicate the following. If known; 

Provide dale of last €A A certiftcation/rtMHtTtillealion:: 

12/10/07 Re-certifkmkn expect 12/I4/21D0 

Co n fid e n is a 1 i ty ; Low M oderuf e X II i gli U « d elm erf 

Integrity; _Low Moderate NJ-Mgh Umldnuul 

Availability; _Low Moderate _%_Migh Undefined 

.Not applicable - this system is only paper-based. 


I INSERT Ci f .ABSD ;: ICA1'l4)N/<;()NTROI., MARKINGS, 
IE A.I.TROPR!ATE| 
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| IN SERT CL Am FICATI DECONTROL MARKINGS, 

IF APPROPRIATE} 

1 0. D this system/projeci the subject of an OMB-300 budge* submission? 

."NO 

X NFS O'yes, please provide Ike dote sod name or 

idle of the OMB MtbmR'riou: I viol ; f ' N-J Nm uas.caoon 
5/2010 

1 1, Does live system conduct data mining as defined m Section 804 of the 

Implementing Recommendations of the 9/11 Commission Act of 2007, F.L. 110- 

X NO 


YES If yes., please describe the data .mining ftmeliom 

1.2. Is this a national security system fas determined by the SeeD)? 

X.NO .YES 

1.3. Statu* nfS>.stem Project 

' d ')C" s' . t On > .t | M ' ^ t. fit veu checked this block, 

STOP. The FT A is new complete and after division approvshsl should he 
submitted to FBI OGC/PCIJ." for final FBI approval and determination if 
PIA and/or oilier actions are required,! 


O. EXISTING SYSTEMS/ PROJECTS 

1. When was (he system/proiect developed? 2003/2004 

2. Has the system/proiect undergone any significant changes since April 1 ' 2003? 

NO (If my proceed to neat question (0.3).] 


•. v ^ v i m ' 1 t N ' i m i % s j O s. mn \ ill 

hoses that apply): 

A conversion from paper-based records to an electronic system. 

A change from mlbrmation m a format that, is anonymous or non- 

■, d w o<* U > J i H tv d ’ P *■ L n > < licit ! I ' U; h 

A new use of an IT sysiern/project. including application of a new 
technology, that changes how information in identifiable form is managed. 

(INSERT O. ASS IF 1C ATi OX/TCAl ROi, MARKINGS 
IF APPROPRIATE) 

epic.org EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 


EPIC-2131 















iLNSERT CLASSiFK;AT1<).N/<::ONTROL MARKINGS^ 

IF APFROPHJATKI 

(For example, a change chat would creole a more open environment and/or 
O' coco '"r o n i >'\e:e w J.mt heal pom mu^p uni not exist } 

A change dm!, results In intbnn.ad.on In identifiable form being 
merged, centralized.. or matched with other databases, 

A new method of authenticating the use of and access to 
in.format ion in identifiable form by members of the public. 

i \ u . i u v ' n me* mi 

A. "mb ah < .our pmeAw^ e; eh'.-. am turn emo;em.wl -a r mhc varo 

A nee interagency use or shared agency ; one don that results in 
new uses or exchanges of information in identifiable form. 

A change that results its a new use or disclosure of information lit 
I derm liable form. 

A change that results In new Items of information in Identifiable 

Changes, do not involve a change in the type of records maintained, 
the fadividnnfs on whom records are rmumawed. or the use or 
dissemination of information front the system/project. 

_X Other jProvide brief cvphmationb Migrated to new 

hardware/operating System 

X *>om a Ah iw th.wx e. v |ne .w .e,.cX no: 

.AO .X.YES 


a, . Provide dafe/tltie of the FI A: SVIb/2tH|S FI A for the FBI Fob be Key 
InfVasmseture 

b. l ias the system/project undergone arty significant changes since the PI A? 

Y. AO .YES other than described above. 

ffhe FT A is now complete and after division approvolfs} should he submitted to 
EM OAC/PCLlj for final FBI approval nod determhnAkm if FI A and./or other 
actions are required.) 


f INSERT ClAbSlf IfflTlOX/E O^T RCA, MARKINGS, 
IE APPROFRfATKj 
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\ Ol sun- M mMIV r HeeoXooHe -Vseee-e;a owc'o tK WO i 

fwb^w :*> „ 



FBI. DIVISION liWBHM OmTE APPROVALS _ f _ 

» 'd * i l ( K>t ' v W Ms \ 



Aft*r all (Ito® 8 srppr$>vsBs> fonmrd signed .bard mgsy phss deeirwfc. capy te FBI CKIOFCLli (JEM 7350), 

(The FBI Privacv aod Civil liberties Officers deiermioeibos, eoadbioas, aod/or fired approval wifi be recorded eo the 
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i m %ssirti i> 


L INMIRMA HON ABOUT THE SYSTEM / FBOJECT 

L Provide ?*. geoera! description »f the sestets or project that haekukw (a) tut ms of 
the twtem/prpleet, ineiadhsg associated twronytost (h) kroektre uf. the 
systenkprojeets huhrimg loterermneekoos with ether prejeek or systems (e) 
t s s e,tv'"t the extern project td> eMote ut the mtWn*ato>n m the «\f ( m prices 
end hew It wilt Be osed; (e) who wit has c aeeexs to the loiorroation m the 
sykem/projeei; if) am! the mmmmr to alt oxers. 

X •.. N \s. V SS. _' S ' 

Mnonacovar S\'"cas (K X\'\ w manage Ac , f - 1 | annnai rebnbursahie 

> t o e v. *' u K § s > v> <. s Rv * N •> ' ' \ 

at HP i v ww’ a w x . fu fhroogh MS \ vsn hut v,H v +< change to an 
(> rac le-raced svst am . 


expand 


\N I H' '' v si s x ' s 

H in ske, capacity, and tunetion|_ 


or daw for the urnt, RAMS has 


_^ tc V C V \ N N S Vv. v< X. v.~ V C> S. 0 

R \ X ^ Nv VI , N_ V s t ' _ V n ' N V 

cccHuKt, vanyrx e c"c^necj| |Once R AMS r 

to Proekx n xviU iv| ‘ 


lamsT 


R.\Mp bauavoc Hath opMshs caat.xta>nt__ 
jPMS) and ARII recoacfe the data! 


a to the Fintetdel Manage ;n 








laid maintam th 

eir saote sutretiooebty t 


_1 


C x Mi n ''V\ , - 0 0 s s 


tie loiorcaaoon co-xunc-e a- RAMS h wanted so Ree-hursehn tinvonrenLs U\ 
out % m cun t cv hdhn ; c cMws'osw yv’ \ theta Vg-vatvs n i 1 ' tr a o 

add caw mv to A aHoadc-J 10 ; MM Xsjpch ad! jo tier nn the ndkud ixV-n.J R \M\ 

C' V t V 1 v S t ' \ < > s R \ a v s s N 

\ unite' s ware. ;c epKnte rc "ho , e:d axixire\a c4 v\' ' \ - 'aanwes pa wed a the : S 

‘\d a v C ,v Cj!x\S ' v ' v \ V ^ \\ \' sOv\ MCO , PW 1 '0 \ 

^' , ■^XC' a V v V. ‘'» v w ^V-Wv.v'' Ns N ON' '^N ,0 s C sN s. 

OsOgs '<si "-'a' ' ■- a 'ho ' nc"\"xi \cn,onhK s 'c R \\|n ah.no ooa \'\\ ; ,-n x '0 

n-o anvJck am! roboat database, 

1'ho oxers w a| be pxxrsonaei R-od- pnvormneot employees arid cone aotore; io 

\ Ns N *■ v a x < S * W s O 

woe ire .recess ;<s 3 \\m of dree n>b fu-wtron. 


U\0.-xSStF!E.!> 
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unclassified 


1 he proposed application will be a web-based: application only available to 
approved users on the FBI's secure class-tied bus re; enclave. 

2. Does the ssstencp-pleu collect, rnX niton. or dlssc-runate any ;nibnoadon a Kuo 
indh ktaeN b e.. a run non being or natwsi person, regardless of oabouohtv r? 

NO 

X V'bS fit yes, please eootfnoeb 

3, Please Indicate if any of Use following characteristics apply to the information in toe 
linkable to an individual. 

The information is Intended to be used. .In conjunction with other data elements, 
to indirectly identity specific individuals, 

X bhe la formation eon ho need ro distinguish or note an individual's identity (re., 
is linked or linkable to specific individuals). 

If ym marked any of Use above, proceed la Question 4 


5. Is foiormadon about United States clti/cns or lawfully sd.rn.ibcd pormsoent resident 
foiens retrieved from the system/prome! by name or other personal tdenhbefo 


NO. [If nm skip to poestfon 

YES. flf yes, proceed to the nest spestumd 
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NO jl'fee programs will mod to work mih PCLU to develop/impbmeot 


tho aecemry for*»{s)'l 


Identify any loom, paper or electronic* used to reqoest xacfe 
mhnmihm from the information subject 
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IJNCLASSIFIEP 


S. h tfe system v>'vM by . contractor’/ 

]£$&> 

x v boo on A i. ww -rs ^ri V vl by omm u)‘ : * i B1 i. U 

\ vi N.; vx^ms v>; uconN t|se t CxV"Y cm s.tvth x 

contains standard contract clauses that must be included in the event the system 
coiXetx. ms.ei - *g e sdit c dker fi" O see* ' <x , ow tro* v x o he 
x I S < t kndKM'V H 1 - „vl V' V Si \ X N ! \ 

Office of the General Counsel may Co required It a contractor is operating the 
system be toe t'Pf, 

9. 1 s s' x.. v, vo eo"\x ..V, u" V x « x s s x h \ E 

Security Division (Seel)}? 

X NO If no, indicate reason; if €X%A is pending, provide nnfk'ipafed 
eesnpieien date; 

A \'N: r ". J tv computed .v reqsonxi. bn? b s me vt been rte doc b 

) < xi Sx v *. ' s N , \ \xt * x me o xo 

date is approxe toaeh Sepfetnbet; 201 \ 

VI IS If yes, please mb mate the following, if known; 

Provide date of fast €d?A ce rtl fie a do n/rweemfka ho n; 

Confidentiality:.Lem.Moderate..High.Undefined 

Integrity: Low _ Moderate_High_Undefined 

Availability: _JUw ^Moderate _High ^Undefined 
Xei any v " e be s v os ro Is cash cape;-based 

10 . I \S X x X X f ^ X , '\V X v S'W V XX x > 

ss N e x * b„' tnved v , o s s \x ^ e ! 2 

??■ (ciidibed at 42 USC EOQOeeGO 

X NO 

YES If yes, please descrihe the data mining fane lion; 

n ■ ' s S x X s s xV ' X S 

X.NO YES 
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Vi:,S If yes, indicate which O' the following chances were involved (mark all 
changes ifeai apply, and provide brksf cxplanatkm for each marked change): 

.. A conversion from paper-based records to an electronic system. 

A change from IrUbrnmuon in. a (croon (fan is anonymous or non- 
k-emi.liable to a format that is identifiable to particular individuals. 

X A new use of an IT w stem pr deco including application of a new 
technology, that changes fans' information in Oents liable form is managed, 
(for example, a ehange that would create a more open environment and/or 
avenue tor exposure: of data that previously did not exist,; 

RAMS is in transition from, an Acc ess database to an Oracle 
database, t he Oracle envenomem]" | 


RAMS. 

_ A change that results in iniormation in identifiable form being 
merged, centreb/ed. or matched with other databases. 

A new method of amhemicating h;e esc of and access to 
information In identifiable form by members of the public. 

A systematic incorporation of databases of information in 
Identifiable form pamhased or Ox eaten from commercial or public source 

A. new interagency use or shared agency function thru resubs in 
new uses or exchanges eO mlormahor: in identifiable term. 
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Changes do not involve a change in the typo of records too 
the hxihhduais on whom records are maintained, or the use or 
diesemmahon of information from the s>mem/proieet 

Other (Provide brief explanation); 

X HO YES 


a. Preside dbfe/tstk of the PI At 

b. Has the aypeorpopeei undergone any significant changes since the PI/ 

NO YES 


I Of i AShi i d if la 


in lamed. 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(Equivalent to the DOJ Midas Privacy .Aaseasmens ylPAa) 


x vx?r or S3 ma m projk ?: 


Ovmesi Fvaso: 
CDoDkO By: 
(Coves: 
IMskjeeiC Os.: 


0 ¥ ST EM/FJR O J EOT P O C 
Naacel | (Projcet M»rs 

| |( Sys tem Adams) 

Program Offk:g: | *I 'Records 

€«*ver*fo* Urn* fRCXAf i | 
(Business Operations Sttppoti Halt 
AXMi o 

A' ' fCverM VUnm v'«K«t T>« 
Pkose:" - 


i m t 


i Kooer Number; fell T 350 



i D \,. 11 lABCWBkia OD 

1 iPvCOk Ole 520 


i n *m ;na tM\,i rvm mw ro\ \i * v" ^ s , ^ .. 

I Program Manager: | j 

O' v e >, Ba?dv 

Program Division: Cmgrsamre: J ] 

K :v: O K, v X ^H~l 1 A ■' A ~~~ 

1 Name; I i 

! Ode. Pones: Manager 

x '' >***i-j— 

Dm Ac "o' P;o,m>‘Piker 

i Name; 
i 1 ale: 

Due signed: 

Name: ' 


1 ' Signed orisjpgj u> ilk ] MDICK'CDi /JM (Avd to JEH IB'104 vie Pa- 520 s 

Copies ireespicsits please prlCAoptcduee os needed for ProgmnCDhdskm likes n: 

I - DOJ Office of Privacy and Civil Liberties (via e-mail to 

pnvecyO asdco.gos) I 

of classified, via hood delivery to 1331 Peon, Ave. MW, Sale 040, I 

2(030; _ ; 

' - * K < o o ' , ;|p N 01 A \ mi' I 1 _ 

! •■ FBI SceO AC (elec, copy: vie e-rrmd to UC| j 

1 - RMO/RMAU (arm: | " | 

2 - Pro cram Division POP /Privacy Officer 
2 - FBI HQ 'Division POC /Privacy Officer 


- OGC 

- ECU. 
•• PCU. 
•• PCD,: 
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tPCI.O On 
UC 
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I INFORMATION ABOUT THE SYSTEM / PROJECT 


I. Pravkle a general description of the system or project (haf faciude*: name of the 
system/project* meimilitg associated acronyms; structure of ihe system/project, 
purpose; mime, of the kfonrmthm in the system and bow ?i will he used; who will 
Inu u^ ( o»K'0)rmu«» Hra idlho > u» flronsmwMim < d 

Before ihe development of TRIM Context, which is an inventory system used to 
manage records, dec Records Mamma meet Division iRMD? records storage mission was 
handled pn.m;.osly rising manual processes. RMD processes did not provide an auditable 
chair; of custody for records, nor did they provide the FBI with the ability to assert with 
certainty that ah records relating to a subie|||§ave been located. In addition.; the ex.taf.mg 
processes did not provide RMD a reliable method of tracking disposition dates lor 
transferring of records to the National Archive and Records Admimstralion or disposing 
of them. As a result, RMD was maintaining many records well bey ond their disposition 
dates. Without a : rack mg system., the risk ofioss of records., access to records, and the 
security ef the records was increased. 1 has, RMD developed ID.a. winch hosts the 
TRIM Context application.; to solve this problem. 

TRIM Context allows the Records Management Control Unit (RMCUT to have 
control of FBI records: complete the inventory of the records; maintain chain of custody; 
and properly dispose cither by transferring ownership to National Archives and Records 
Administration (INARA) or by destruction TRIM Context prosides one location to 
account lor ah records w RMD A custody. The system maintains information up to and 
me I tiding the SECRET class! ncaiion. 

TRIM Context works m the ibllowmg manner; 

FBI records are assigned record numbers. In order to locate a record, a toe; logs 
into TRIM Context and types in the record number. T RIM Context then displays tor the 
user where the record is currently located along with a history of the record's previous 
.> o w\ 1 s oc wndyo enow ' v wf'>"., me' k\ ,n New M ' .we 

room number. The location data does uot indicate which individuals, if any. may 
currently have the record, f or example, TRIM Context may indicate that record 123 is at 
FBI Headquarters I n the Office of General Counsel hut n/lf no; Indicate that the record Is 
with FBI oiemslot | | b6 

b7C 

v „ u * ;o ,,ol' > vx a o w> , v d v n 
does not contain sensitive FIT. Which might otherwise he found in the actual records. 

This system merely tracks the record's location by identification number If a user docs 
not know the record number, die user may ret rieve the num ber through searches in other 
systems F or example, to locate the record on I I an individual entild s earch for 

I I - -- norm dmabaw urn. !o e o : ,hc tecotU e owvi ,ew mm , a oh I I 
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I SwkWSSffo.S 

Is 123 Than, the user wlil manually input the record manner Into TRIM Context and 
learn where the record is located. 

Accesss A sire system A limbed o designated users, ail a which are PB; 
employees or connctcfors. The sy-gwo contains a her of users end the tigers atuhortxed 
roles Farther, the system contains audit logs that cast ho searched by the name of the 
user. 


2. Docs the syssenvpryject collect, maintain. or disseminate any mtorn amors about 
individuals in idesAsiiabie torso i e„ ss information Faked to nr linkable to spec site 
individuals {which are the definition of personally identifiable mibrrmuion (PIDs? 

NO f If no, STOP, The FT A N now complete and alder division approval si 
yn-m iKMp'iiiSvih' 1 Pi Psa !\ H to melt id s <v psss' t isk^' n.'is 
otherwise advised, no I'M A Is required.) 

\ i v t'.' .'CW o J 

if an individual doer not know the record number of the record that the Is sot vidua: 
-desires to locate, the lad;vidua; may look up the record stum her in another system, by the 
name of the record, which could eositasn PO depending cm the type of record , and then 
learn the record stum her. The record number is then manually entered snto TRIM 
Context, Thus, the record number .is potent lolly linkable to on individual 

The record number has a low risk off|p vacy as the only function one cart perform 
in TRIM Context, with the record number is so learn the location of the record. Further, 
rite aet of learning the location of the record serves an Internal government function. 

Thus. since the task of privacy is relatively low. and under MAO-22. OMB Guidance for 
Isnplemimi.fog the Privacy provisions of the E-Government Act of 2002, a Privacy 1 nr pact 
Assessment is not required for systems that are for internal, government operations, :t 
Privacy Impact Assessment is not required for this system. Moreover; a search by the 
record number does not. retrieve information about an individual, but. instead retrieves 
information about the physical location of the record. Therefore, a Privacy-' Act system of 
records does not exist for this portion of the system's. 

Although the- system contains an audit log with the names of individual FBI users, 
winch ear:: he linked to art audit trail associated with an indi vidian's activities on. the 
system, suds records arc eewered under DOT-002. Further, under M-03-22, this portion 
of the system does nos trigger a Privacy impact Assessment, as dus portion only contains 
non-sensitive information about FBI users and is used to carry out ass internal government 
function. 

3. Does the sysiersvprpjcci pertain only to govcysimciU employees, ccm tractors, or 
eon-oifowsv •' 

.x.NO .YES 


I. swhvoslsvd 
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The audit logs contain iittbrrnabon only on government employees and 
co-dracoes. However, the record rtttsrtbttos are links hie to records roainhbrnvd in other 
systems, that are largely about norawoverntoent employees and cord factory. 



Y ES If y es, cheek all tfnu afyply 



encrypted, hidden horn ah users via a look-up table, or only available to certain 
users). Describe: 
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NO ro?v program wll.i need to work wills PCLU to devdop/tmfPemem 
ike accessary formfokf 

YES Ideality am forms, paper or eicctroak, used to mpeO sued 
information from the information stsbleei; 

7.. lias die svstem aide ryots:: Oervtfkabon <E Accreditation t'C&A) bv ibe FBI Sac util v 
Division (SocD)? 

'NO If no, indicate reason; If C&A is pending, proside anticipated 
completion date: 

x YH.S If yes, pros die date of last €<&A vertlfkaffon/rewcrtlikatlon: 
.foousry .Nt XPfo 

.Dork Know. 

8, N this system/prosect the sabmet of ac OMBOOO badyei sabahssloo? 

X NO Don? kttow YDS If yes, please pros kie 

the date ami name or tide O' rise 
ONfB strtomsOon: 

9, Is ihts a ncuonN security system ms defermhsed by the Seel)?? 

yx.NO .YES . Don't know 


fd. Names of System/ P-owm: 

This >s a ness system) pro foci in development. Ilf you cheeked ibis block, 
STOP,. I be PI'A is rum complete aod after dh hhm approve Its I should be 
v.pnuitwd to Fill Out be I 1 for dual I IN apos.n O «s$d dew? rahu^um if 
PI \ and or other uetfosm use mpfovdd 


11.1 \foo\m OMi Ms «'Kon t IS 


org 


kudmodkd 
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When was the svsteni/proieel developed? The RO system was developed in early oar 

2005 . 

Has the system-project undergone any significant changes since April ; 2002? 

NO [If no. proceed to next puesbon til 'H. i 


YES v s inc cate s ot the foilov. ng chanty ware hive ve (mark til 
hexes that apply). 

A conversion from paper-based records to an electronic system. 

A change from information in a forma/ that is anonymous or non- 
iemifialue tr nmat that is Idenfiha! articular indl 

A new use of an 11 system;protect, inch-ding application edit new 
technology, that changes how information in identifiable ibrrn is managed, 
(hot example, a change that would create a more open environment and/or 
averme tor exposure of data that previously d-d not exist,/ 

A change that results in inionnatlon in identifiable harm being 
merged, contra hired, or matched with other databases. 

information In identifiable form by members of the public. 

A systematic incorporation of databases o f iniormatlovt in 
Identifiable harm purchased or obtained fi'om commercial or public source 

.A new interagency use or shared agency function that results m 

new uses or exchanges of miormation in identifiable form. 

A change that results In a new use or disclosure of /mlonnation in 
i m 'fid-- ibi i 

A change that results in new items o) mionmumn m identifiable 
form being added into the sysiem/ptmeer. 

Changes do not involve a change In the type of records maintained 
the individuals cm whom records are maintained, or the use or 
dissemination oJ: information from the symen-/protect . 

.Other {Freckle brief explanation!: 
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a. Provide doteMik of the PI 


h. Has the eystem/prcoec? undergone any Mg;ufka.at changer rince the Pi A? 

NO .YES 


I'Hk' FT A k osm enospk-te trod after division approval^} .-dteohi he jimmied to 
I m t HA i"t t I ho- dn.d HU upfe-o.d ask detcrminaAon d PI V ami m othu 
ack>«> ore re<|« I red. j 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. 07/06/07) 


NAME OF SYSTEM: Security Access Control System (SACS) 


b6 

b7C 


FBI DIVISION APPROVALS. A PIA (and/or PTA) should be prepared/approved by the cognizant 
program management in collaboration with IT, security, and end-user management and OGC/PCLU. 
(PIAs/PTAs relating to electronic forms/questionnaires implicating the Paperwork Reduction Act should 
also be coordinated with the RMD Forms Desk.) If the subject of a FT APIA is under the program 
cognizance of an FBIHQ Division, prior to forwarding to OGC the PT APIA must also be referred to the 
FBXHQ Division for p rogram review and approval, if required by the FBIHQ Division. _ 



Program Division: 

FBIHQ Division: 


Security Operations Section 

Security Operations Section 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 04/17/08 

executive as Division 

Name: 

Name:! j 

determines) 

Title: 

Title: Unit Chief 

Division Privacy 

Signature: 

Signature: /s/ 

Officer 

Date signed: 

Date signed: 4/18/08 


Name: 

Name: Michael A. Morehart 


Title: 

Title: DAD 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 



Date Signed: 

6/26/08 


Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


FBI SY STEM CONTA CT PERSON 

Name: 


FBI OGC/PCLU POC 

Name:! 


Program Office: Security Operations Section 
Divisi on: Access Contro l Unit 
Phone: | | 

Room Number: 1358 

Date PTA submitted for approval: March 26, 2008 


Room Number: JEH 7338 


Upon final FBI approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGC\PCLU intranet website 

2 - FBI OCIO / OIPP 1 - PCLU Library 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC /Privacy Officer 

2 *- FBIHQ Division POC /Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


epic.org 


EPIC-14-06-04-FBI-FOIA-20150616-7th-Production 


EPIC-2220 






FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev 07/06/07) 
NAME OF SYSTEM: Security Access Control System (SACS) 


For efficiency, a system owner or program manager can be aided in making the determination of whether a 
Privacy Impact Assessment (PIA) is required by conducting and following Privacy Threshold Analysis 
(PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records 
Management Division (RMD) to identify and resolve any records issues relating to information in the 
system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The 
questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

_ SACS contains a| |of personal in formation containing Nam e, | | 

| | Also, data on security clearance issues are 

included. 


a. If the system is solely related to internal government operations please provide a brief 
explanation of the quantity and type of employee/contractor information: 

_ SACS currently hou sesl_l and validates the following data: Namc J ~| 

I ~1 Also, data on security clearance issues are 

included. 

2. Purpose for collecting the information and how it will be used: 

The purpose of SACS is to provide controlled access into the FBIHQ. The system issues and tracks 
identification badges for the FBI and monitors alarm systems. It performs database functions 
(granting/denying) on an isolated network which is used to assist in regulating physical access for the J. 
Edgar Hoover (JEH) F.B.I. building. The SACS identification access cards are programmed to grant/deny 
the holder access to the facility, or select rooms based upon access level granted by FBI security. 

SACS is used to create and activate both permanent and temporary identification badges. SACS is 
programmed with information indicating which badge is authorized for access to specific areas and the 
timeframes for which that access is valid. To gain facility and office access, the Security Division must 
approve the request based upon background investigation and need to know. After being approved, all 
FBIHQ employees, contractors, visitors, and others requiring access to the facility are issued an 
identification badge. The type of photo badges issued may be permanent, temporary, or visitor, and each 
type utilizes a different color scheme. Everyone who is issued a badge falls under one of the three types. 
Each badge is a proximity access card. An activated proximity access card is required to activate card 
readers that control the facility perimeter turnstiles, access to offices, rooms, or Sensitive Compartmented 
Information Facilities (SCIFs). When a badge is placed next to (close proximity) a specific card reader, 
SACS determines if the badge is valid for access through that access point at that time. Based on that 
validation, the SACS either activates or does not activate the controlling mechanism (e.g., turnstile, door 
lock). Some card readers require the badge holder to enter a 5-digit personal identification number (PIN) in 
addition to swiping/reading of the badge, in which case both the badge and the PIN (dual factor 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev 07/06/07) 

NAME OF SYSTEM: Security Access Control System (SACS) 

authentication) must be a valid matching set and associated with that card reader at that time, in order to 
permit entry. The SACS logs all attempted accesses whether valid or invalid. 

_ 3, The system's structure (including components/subsvstems): I 


4. Means of accessing the system and transmitting information to and from the system: 

Log in directly into the SACS application. 

5. Who within FBI will have access to the information in the system and controls for ensuring that 
only authorized persons can access the information: 

Access to SACS will be controlled by unique user accounts and system roles. Only users assigned to the 
FBI’s Access Control Unit, SACS Administrator and ISSO roles will have access to user account data. 

Only the Privileged User a nd system administrators will have access to the server’s d esktop. Total number 
of users within the ACU is | | *>7 e 

6. Who outside the FBI will have access to the information in the system and controls for ensuring 
that only authorized persons can access the information: 

No other agencies outside of the FBI use or will have access to the system or to the information in the 
system. SACS uses access control measures for providing authorized users access to SACS. 

7. Has this system been certified and accredited by the FBI Security Divisions? X Yes _No 

8 Is this system encompassed within an OMB-300? _Yes _No X Don't Know 

(If yes, please attach copy of latest one.) 

I. Was the system developed prior to April 17, 2003? 

_YES (If “yes,” proceed to Question 1.) 

X NO (If “no,” proceed to Section II.) 

1. Has the system undergone any significant changes since April 17, 2003? 

_YES If “yes,” please explain the nature of those changes: 

(Continue to Question 2.) 

_NO (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil 

Liberties Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties 
Office. Unless you are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable 
form about individuals? 

_YES (If “yes,” please proceed to Question 3.) 

_NO (If "no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev 07/06/07) 

NAME OF SYSTEM: Security Access Control System (SACS) 

Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. 
Unless you are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and 

Civil Liberties Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy 
and Civil Liberties Office. Unless you are otherwise advised, no PIA is required. 
(FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If “no,” go to section III to determine if a full or short-form PIA is required.) 

II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 
See A. 2. above. (Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

X Y ES (If “yes,” please proceed to Question 3.) 

_NO (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 

Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. 
Unless you are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

X Y ES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

X No. (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy 

and Civil Liberties Unit (PCLU) for review, approval, and forwarding to DOJ's 
Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is 
required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If “no,” go to section III to determine if a full or short-form PIA is required.) 

III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If “yes,” a full PIA is required. PTA is complete.) 

_NO (If “no,” please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev 07/06/07) 

NAME OF SYSTEM: [insert name] 

_YES A short-form PIA is required. (I.e., you need only answer Questions 1.1, 1.2,2.1, 3.1, 4.1, 

5.1 (if appropriate), 6.2, 6.3, and 8.9 
of the PIA template.) Please note 
that FBI and DOJ reviewing 
officials reserve the right to require 
completion of a full PIA. (PTA is 
complete—forward with PIA.) 


NO (If “no,” a full PIA is required. PTA is complete.) 
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UNCLASSiriEP/ZFOROFFICIAL USE ONLV 

Form Rev. Wv/OS 

CHECKLIST FOR PRIVACY COMPLIANCE FOR 
FBI ROtTtAF DATABASES 
(including Comparable applications) 

A AME OF SYSTEM / FRO I Yrhkte Management Application (VMA) 


1 rs 5 

tWw 

i STETFM/FROdFCT FO€ 

iBh«,i whpoc 

| Ctvs 

4§fH To- 

1 Marne: l 1 Sneei.ihsj 1 


1 Aces 

At A Ooc 

Ibogtam OCtRa; t u v V ' 0 • 

Supuoh. Urit 

_ 1 

R«® Number: jhl-f 

b6 

| 


1 Division: !T$D 

1 Phone; | j 

Room N’umber; 1 DC JED 


b7C 


THE checklist A based on the FBI f ovary Impact Assessment (FI A) tor FBI Routine 
Databases of 4/T/FS as approved mm® »WHQ-< CC'M Serial 40 *♦ H OS In 
accordance with tbe PIA. this checklist may be used In bee of any additional FI A (or 
FTA), so long as every use of tbe twelve blocks below east be cheeked. This checklist 
should be completed by tbe database manager for other appropriate official-' as 
determined by tbe division) and approved by tbe Division Privacy Oftleer, 

\ Provide date checklist prepared: February f 2011 


B> Provide a general description of the system or project, that includes; name of the 
systens/prpjecE Including associated acronyms;: structure of the systcm/projeeE 
purpose; nature of the information In tbe system amt bow tf will he used; who wilt 
base access to tbe Information in tbe system and tbe manner of transmission to all 
users. 


i ;* '■ ri ;ck V • u.w \pr ‘ mum *\ \ 

rs Admin 


yMmnfennc. Q 


- osOioor-'iCv .aid ON-'Oc.Med mm-Ucugnee a :\l coo 0000 , mm 

'otonnomm mt dm emme I Pi tehiole dcml ~ ] 

I r rhEvbb 

im, t s aommobdc costs (direct and mdoeca mileage readings, motor rnainte?s%:e 0 
A x' \ v w ' * o ' ' v O' v 0 \ I , v X \ x. mo:% " 

- »e v O' "sec 000 ?■ Cv, „ s.'<, ' > \e <A 'o\ N x 


UNCLi 


IREnuFOK OFFICIAL USE ONLY 
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\ v \ ;net s v $ \ Pcrso? v \ v. n B?e ^ . 

ee m i >i\.v " 'me aom v s\t pc ^ t fw> r/v v * ' i ' m ' M - vnt 

* f Si <. * O 'fo^A ' of US 5 $»d !> U;f. OU.it An a;--''.:' Bl* v.H '■dv-.ICx %L S;b.t O 1 

\ MA li * v ^ . N ' ' \\ ' * v v . v< V N ' » 'V U vS S ^ ' 

from the Central Records System. 

X v s f Mi S O X 0 Sts .. )M ns f f t V \ * 

it ;■ BIBO 11 k nyvneU m td$4ViA0h lechm-foc) B I m v ! An * o x> 
to ' \t \ o ^s' v aelhou-'oJ thxn.gn the Sv\ic ‘ \ .ceo- Ibeen-A sfAB $ s\ su n be tore 

an man idnel mea ,- ees^'he y. stem l p*m sperm, A. e \ Mi \ ,\, ome' isfVb1f|e*b;^ be 

aa mAo a t - \r nAukd e' the uncFn x * it x \rr >■ > > <.< « 

C Complete checklist (oil must be cheeked os being accurate for this 
d atu b a s e/appbe a b on) t 

X Xh> ' \ s »* .. i ' s e ! o 

d vs N \" f\,. A" be stem icd bmvetb thixmgh^^ft ! m } 

descriptors such as gender, race, birth data, geographic indicator, license number, 
or license plate number 

X 2. 11 X s system derives Information tfom FBI records covered by existing Privacy 

fo 'NSv vCO." vs ' \ So !' ' v s Hi .V\C'0 

format in which shone records are maintained and-'or from Information shat is 
mo .'. ! i. t e cost rv ve. cemw v \-> Bi k\ s not 

csacred os s\' ensg v, stun* a' ree^tds nomfoi commI the Pi 'H - 

, X ' x e. mr commeKi.h dau obi poolfebsampi A wmise d e'a m uvkAcn n\ ;he 
s' nebu's umess nr oueueunn, is derived from evm:n, 031 rceor. > 

X. i 'e s v' ss t <\ .s » v\ ' '" ' s , s noes. i s> be r.r ( sqt.nd 

o; edte: suedv' I B! s-e.rus ;n\l \-X ng o k> - I'aeed ''tried) on e 

operador-ai need to know. 

.. X. S. The system is not rused for purposes of pattern'-based data mining, 

X _ 6. I mi... and continued access to the system is subject to permission controls 

v r&xi fo i Big s v. f f v > o ' e o ' ^ns\ v s 

...X. 7, .Access to the system can be audited. 
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* yNNy'yNyyN,, fss y I “ . 

* ' \t\ \ o;',h> oeehoetsoo vlopi'^Cv no k ; s\ p *o Todice;'' .. k of 

3 B\ \ x v v. Cage y iK' * K x " ' K0 - ' 3 <mo Y\i \ s:»nwC 

time. ' o.s “*» \ >- whh v. v n <y- soon o. leg « > >T)p f '.ho ' > h in y v o 

OH .I N O N o. f pwrure <* 01A ^ VM X CO .0; HR % 5.x 0 x NO 

X o IN y ox; e ' 'Xfclo 5 < 14 h 5 f - 'N'H.NvO cool .x.;m.mens 

On vO On. " .o'.OU'O I'' o 00 'o' „<1 1 0. \0l 'Nv'.%' X WCVn \ot\0. 

\ |N.\ ' O l to N yy ' ' "y\< l -N y' y -N ' ROO V ' \ 

Division. 

\ ; Vo roxNOOolfy ooo it c 'oo-'OLOk'o of.- oo on « emVsv Ooi ;oo o: oo 

.vo.' b s! sn ? osNOor.v ''uOkse i HI I .o,! on ' n o **-p ' .y",h -."o > "Vs} 

on cocrMOxv one mov ho pa-v^Vyi pt^b'i 100 

if If a database contains kifdrmaikin that may ha considered 
k'ov^t^on.iNvHO or is maintained v part of a larger FBI -program* the 
database administrator or program manager (or division privacy officer) most 
consult o'oh the FBI'n ClCCk'x of the General < damsel. Privacy sod Civil Liberties 
Unit about the potential seed to assess the privacy risks to a separate PIA, 

E. File Notea fsotnmarke any additional information that may he warranted for 
record purposes, e.g.. coordination w hh OG€. etc.}: 


VVPKtIX IM.omtTU s, 


| Proosoo- x km ago; ;.s ; vku oops000010 

S oflltf-i! ,N Is' S y..sn sk'E'CisiS'K'N! 

Diviskm Privacy Officer 


k., 1 1 

S&m&me. | 

zr i 

| Otiiv $ > tkHvd ■ ^ / ^Nyy'^Uy / NV- £ / 

I fyste N;o.no-J' -X -,K S-- 0 

b6 

\onoo. 1 I 

Name: j | 

b7C 

1 hslo s '.s s, k'of I hsusvu' \rpoeoius-sN 1 
| Support link, USD 

Otie: IT Specialise, USD 
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y y\ y ' y y ' yy y ' ' 'y y N 

- i'or.N.avi oop> u* the I Bl Pmocv pod {U u \ Sbemc^ 1 'ox G 'M 5 ; HI f o 5 v 


y . y) bstem AgHi 1 ?. „o ' , xf no; n-odkkd y m, thee arc. sot i e G condesa;? 

Ci N , 'S'.'OO .' S.V". -N'.U' 'S.H Ns",,:. : yi V . f 'Sy i\ s'. , V. * > «~'y ' ' \ i,\" 
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FBI PRIVACY THRESHOLD ANALYSIS (FTA) 


NAME OF SYSTEM / PROJECT: Sc: 


York (SI'ION.; 


a* V\ v v\ ' U 


Derived From:; 

SYS iiaNFPROJFCl FOB 

no <HN IP 1 l EOF 

CWW By:. 

■Name:! 1 ! Name:!_1 j 

Reason: 

ReeisnsBy On: 

M 1 

1 Privacy Civil Liberties Und 

1 Phone: 1 1 

j Room Number.: JFH. 7350 


I-10 NIX ?MO\ |\ I EKXH IN U I YPPROX U ^ 



program Manager lor other appropriate Division Privacy Officer 

exeemive as Division determines)_, . 

Prog;an: Divides:: 
information Technology 
Services Division 

Signature: | | Signamre: 

Dale signer:. FOP /A ! ^ Date mined: 

Ntsrne:| | Name: Idle: 


: die: so ic save Program s um aver 


WwTT- 

> ran el: Privacy Officer 


kNIHD Division: 
Customer Suppon 

Sees km (CSS; 

SigiiiddseT A- -•..' 

Dale .signed • /•• F- dAF / y 

Name: Naomi Singer 

' s v ' N s \ 

Six dan. D'SD 

N 1 = 



Alter ail division ao|.:eovalv. fsr^srd mgaed herd voov nine elceB'aoie copy in FBI OCC/PO.JJ OF II 050. 

I Die FBI Privacy and C;vb Liberbee FBI lees's dereinbnadods.. ceased ansa. and/ca rinai aporov;-: a. Ill be recorded on llse 
Pd I cc. d<y pace.? 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 


t. Provide a general description of Use system «r project fhat mdttckam (a) mmu- of 
the otehnon ' ^owmed 

I' V xUk' P '!\\'' O VHS\i!!\vv> 

purpose of the »yste«n/project; (d) oator*.- of the inlknomdion hi the systcm/project: 
and h-w w *wd t-e ow'd; «e> ofo- "fo p,w< wemv so toe omn waw-o m foe 
system/project; (ft and the manner of' transmission to oil users. 

The Sensitive (fompanmented Information Operational Network (SCION s provide! the 
inhastructure allowing the hit; to interface who the notional Intelhgenee Comnstmtty {1C) 
Through the Joint Worlwide buelffoenee ( 'omntunkatfons Systems (JWICS). JWICS 
provides access to the 1C the Secure Automated Message Network. NCTC Online and 
other Comm unities of interest {COIN). SCION utih/es the 'Trilogy Program-based 

software. 

« ifohaneod access to iC data hares & websites outside of FBI and FBI ••'.-vide share 
drives: 

« Pmall capabilities with various levels of access, both internally arid externally; 
anti 


.NO 

X YES |lf yes. please continue,^ However, the only psrsosta! info rout lion 
maintained are encrypted passwords as well as usernames contained within. the 
audit logs i w hich are oof accessible to general users). 

3. Please indicate if any of the lotion, we diameter-sites apply to the tmormaikm in the 
system about individuals: Bear in wind that log-on inforrmnion may identity or be 
linkable to an individual 
(Check all that apply.; 

The information directly identities specific individuals. 

The information is upended to be used. In coni unction with other data dements, 
to indirectly iderady spew lie ind i viduals. 
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